Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/aWvaZULk0Z6E0bbJxxVG8jUZiUU.roa
File: aWvaZULk0Z6E0bbJxxVG8jUZiUU.roa (raw, json)
Hash identifier: Pn/xTGf/1+EpML98oWlmBS1Hqj9JxWSKBlqD4AdWpfU=
Subject key identifier: 69:6B:DA:65:42:E4:D1:9E:84:D1:B6:C9:C7:15:46:F2:35:19:89:45
Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial: 018553D9878E9016A670F2AC5F6FCE759BB0
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/aWvaZULk0Z6E0bbJxxVG8jUZiUU.roa
Signing time: Tue 27 Dec 2022 13:50:43 +0000
ROA not before: Tue 27 Dec 2022 13:50:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43436
IP address blocks: 185.6.140.0/22 maxlen: 23
193.58.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:d9:87:8e:90:16:a6:70:f2:ac:5f:6f:ce:75:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Validity
Not Before: Dec 27 13:50:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=696bda6542e4d19e84d1b6c9c71546f235198945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:7b:d4:7d:fd:af:96:92:37:06:45:7b:fd:
fd:b6:55:e0:20:98:98:84:13:4d:a0:82:c6:55:8b:
0c:f6:b7:2b:7a:89:b2:f3:83:08:1f:43:d4:3d:b3:
d2:c5:3f:3e:74:a7:2c:2f:2b:b6:95:5d:a7:26:e8:
fa:56:4b:58:73:24:c9:3e:37:65:2a:b8:b9:11:7e:
63:c3:23:ca:a0:42:4e:62:bc:0b:19:74:be:87:0a:
8c:08:46:01:35:a4:79:8d:5e:e6:55:db:3b:c6:6b:
53:2a:04:3d:c6:73:ee:eb:83:6a:9d:ee:2e:03:61:
de:03:9b:b4:04:2e:0b:2f:b3:d3:08:d2:b2:c7:1f:
d8:49:4a:9d:59:7d:d3:a3:27:6d:b6:02:d1:1f:21:
14:0a:e2:52:6a:d8:e5:44:e7:bc:40:7c:85:a2:af:
70:0c:94:31:2c:82:7a:48:68:df:dc:5a:ac:84:d1:
ca:62:ef:ec:7e:68:d4:88:f9:ce:77:89:d6:17:cc:
4b:00:ac:36:35:2b:8a:ce:f3:1d:db:ae:5a:5a:42:
85:fa:aa:57:92:22:9d:14:20:c5:e8:5c:ad:a4:c4:
f3:56:4e:b6:5d:c1:c3:19:7d:09:22:e0:16:f3:5b:
5b:4b:d1:6a:4a:62:f2:61:d9:ef:45:ca:f3:44:a2:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:DA:65:42:E4:D1:9E:84:D1:B6:C9:C7:15:46:F2:35:19:89:45
X509v3 Authority Key Identifier:
keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/aWvaZULk0Z6E0bbJxxVG8jUZiUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.140.0/22
193.58.247.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8c:8f:fd:4f:f3:79:f8:0b:18:92:b7:05:1e:65:d5:17:eb:
c4:39:1c:66:7a:84:1a:4e:91:c4:06:f9:7f:7d:af:9e:b6:76:
c8:e1:c4:a0:45:ab:6f:4a:c9:a9:a2:4b:fc:ff:48:ce:21:d5:
01:b8:f4:90:ad:50:cb:ef:94:1e:7e:d3:9c:d1:cf:df:91:33:
8b:8b:94:d8:bf:0e:65:be:b6:04:50:ea:70:f9:04:dd:2a:63:
1a:1d:37:8a:72:83:f8:3f:4a:38:27:57:f7:4e:5f:7b:f7:66:
e6:da:7f:78:fb:51:f0:77:5d:23:b3:10:06:34:75:87:b9:64:
e6:50:9d:5d:34:a7:f9:f4:04:b5:56:ab:e5:cf:51:5d:37:00:
31:fa:12:8b:e8:17:30:e7:62:b6:a9:b5:87:74:7a:95:8c:ad:
a0:d3:e8:81:e4:ea:e4:2c:59:73:50:70:06:44:dd:91:93:00:
20:02:32:95:52:b3:1f:f2:6a:bd:53:1a:c0:ae:1c:84:40:cd:
79:48:0b:43:4b:d8:51:b6:06:ae:0e:77:22:56:a7:40:e3:39:
d7:10:98:9b:d9:ad:1c:18:ac:f3:fb:7e:27:c9:f4:be:a2:64:
83:ef:92:0c:cc:f2:61:c4:15:d5:d3:6e:a0:00:5f:87:8b:d7:
a4:8f:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:52 2025 by rpki-client